Nmap is a classic open-source tool used by many network admins for basic manual vulnerability management. This free vulnerability scanner basically sends packets and reads responses to discover hosts and services across the network. This could mean host discovery with TCP/ICMP requests, port scanning, version detection, and OS detection. For admins who are comfortable creating scripts, the tool allows for some advanced vulnerability detection as well. Nmap is all about expert-level command-line use and doesn’t offer an intuitive display for easily running scans or interpreting results. Though this makes it the right fit for some professionals, most admins will want a more streamlined approach to vulnerability scanning., Vulnerability scanning – and in fact, vulnerability management – is one aspect of protecting your network. Scanners can only detect vulnerabilities that already have tests implemented. You also need to develop a sense of your network’s normal behaviors, via bandwidth monitoring and analysis tools , particularly tools that let you specify , Whatever type of network vulnerability scanner you choose, look for a tool that accomplishes some or all of the following functions, depending on your needs: Weakness detection – The first step of vulnerability scanning is to detect system weaknesses across the network. This could mean using a tool to try to catch and even exploit security .